Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3334203d3e20323639303438.roa
File:                     323830343a356561383a3a2f33322d3334203d3e20323639303438.roa (raw, json)
Hash identifier:          ojUCoKkhqwN01Z0g361V3s0sDSMhATETHTPmFYKWsLg=
Subject key identifier:   01:CE:9A:2A:87:E1:6D:05:7F:70:E9:E3:3D:B9:0A:01:14:4F:46:2C
Certificate issuer:       /CN=D00FEB355F990A1D1FE0176775A9C0F3F11E723E
Certificate serial:       552D5AEFFA1FB722C7F83680084113E80FF64AAC
Authority key identifier: D0:0F:EB:35:5F:99:0A:1D:1F:E0:17:67:75:A9:C0:F3:F1:1E:72:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00FEB355F990A1D1FE0176775A9C0F3F11E723E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3334203d3e20323639303438.roa
Signing time:             Fri 20 Sep 2024 18:45:20 +0000
ROA not before:           Fri 20 Sep 2024 18:40:20 +0000
ROA not after:            Fri 19 Sep 2025 18:45:20 +0000
asID:                     269048
IP address blocks:        2804:5ea8::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2d:5a:ef:fa:1f:b7:22:c7:f8:36:80:08:41:13:e8:0f:f6:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00FEB355F990A1D1FE0176775A9C0F3F11E723E
        Validity
            Not Before: Sep 20 18:40:20 2024 GMT
            Not After : Sep 19 18:45:20 2025 GMT
        Subject: CN=01CE9A2A87E16D057F70E9E33DB90A01144F462C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:15:a7:6c:e5:fb:04:e0:1f:77:75:1b:b4:
                    17:ff:04:ab:b1:03:e5:dc:39:db:e4:68:4a:5c:cb:
                    eb:6b:40:e2:d6:f5:49:7b:60:8d:ad:e5:5c:58:8e:
                    c9:13:e9:4f:52:fb:4a:ea:4f:08:fd:21:44:38:e2:
                    3f:76:53:f7:36:2f:30:7a:88:d1:8a:00:dd:09:eb:
                    c5:e6:de:75:51:b1:5c:65:67:ab:66:96:7d:e6:b0:
                    61:24:b2:28:f6:84:fa:7c:75:55:91:7f:c8:9b:46:
                    ec:11:14:ce:b4:02:4b:5c:8f:af:6e:c7:60:f1:de:
                    c9:e8:51:fe:9c:25:72:20:4d:a7:27:f9:bd:4b:a6:
                    f1:d4:ac:10:03:2c:ab:19:75:89:69:a8:c9:9d:be:
                    24:5c:17:23:e0:7c:a7:dc:38:54:04:17:bd:9a:a5:
                    bd:ad:84:a8:ca:bd:df:85:bf:33:64:56:a0:cb:87:
                    c4:48:e4:f1:08:f3:57:98:ad:6b:fd:71:02:7d:ce:
                    20:ca:da:c9:ea:05:78:5d:0f:81:fd:ef:62:ba:2a:
                    8e:80:f2:a9:c0:c9:b6:f8:96:0a:f5:27:4d:23:63:
                    c5:fe:fa:58:b4:ec:df:bb:80:b8:00:50:f5:51:dc:
                    80:60:b1:b8:fd:59:df:43:b0:c9:a1:7e:50:1d:8a:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CE:9A:2A:87:E1:6D:05:7F:70:E9:E3:3D:B9:0A:01:14:4F:46:2C
            X509v3 Authority Key Identifier:
                keyid:D0:0F:EB:35:5F:99:0A:1D:1F:E0:17:67:75:A9:C0:F3:F1:1E:72:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/D00FEB355F990A1D1FE0176775A9C0F3F11E723E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00FEB355F990A1D1FE0176775A9C0F3F11E723E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3334203d3e20323639303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:15:7e:5f:c4:97:ce:bd:2a:c6:cc:50:be:1e:70:a0:25:af:
         ad:16:be:75:58:2b:9d:0a:2f:98:12:c2:62:d0:5d:31:a3:cd:
         19:fa:2e:7e:3d:5e:bd:48:d4:9f:5e:10:a6:9e:39:da:3b:fe:
         3a:6d:62:99:a7:3c:cb:8a:e0:12:0f:2f:d0:68:84:6d:a1:20:
         24:dd:d4:b6:f1:d0:9c:71:31:4d:fd:0d:65:75:0c:ca:c4:82:
         45:22:0b:84:a6:54:f1:e8:7b:f6:4d:08:8a:87:01:33:26:d0:
         a9:5d:91:75:f2:df:47:db:0c:9e:54:89:39:38:e8:03:60:da:
         ec:d6:d5:08:98:ca:bb:2f:d9:72:45:bc:95:b1:24:33:5b:b9:
         06:00:89:a3:f9:c4:d0:17:7f:ce:8a:4b:92:a1:cf:00:24:81:
         13:9a:47:fe:22:2c:8b:30:d2:08:3b:0a:1e:55:e3:06:e6:6f:
         10:cc:9a:06:1c:76:1f:42:3e:d1:3d:b2:d1:d6:d3:21:f8:6d:
         fe:cb:62:8c:35:9c:ee:28:33:a9:e3:b6:76:36:00:bd:f4:40:
         14:9e:79:56:21:5b:2a:76:b6:66:a4:c5:6c:62:be:2a:a2:0e:
         cf:ae:7b:a7:72:28:36:a3:29:2f:e6:29:f3:63:10:91:52:30:
         4e:a8:59:71
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVS1a7/oftyLH+DaACEET6A/2SqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwRkVCMzU1Rjk5MEExRDFGRTAxNzY3NzVBOUMwRjNG
MTFFNzIzRTAeFw0yNDA5MjAxODQwMjBaFw0yNTA5MTkxODQ1MjBaMDMxMTAvBgNV
BAMTKDAxQ0U5QTJBODdFMTZEMDU3RjcwRTlFMzNEQjkwQTAxMTQ0RjQ2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFBWnbOX7BOAfd3UbtBf/BKux
A+XcOdvkaEpcy+trQOLW9Ul7YI2t5VxYjskT6U9S+0rqTwj9IUQ44j92U/c2LzB6
iNGKAN0J68Xm3nVRsVxlZ6tmln3msGEksij2hPp8dVWRf8ibRuwRFM60Aktcj69u
x2Dx3snoUf6cJXIgTacn+b1LpvHUrBADLKsZdYlpqMmdviRcFyPgfKfcOFQEF72a
pb2thKjKvd+FvzNkVqDLh8RI5PEI81eYrWv9cQJ9ziDK2snqBXhdD4H972K6Ko6A
8qnAybb4lgr1J00jY8X++li07N+7gLgAUPVR3IBgsbj9Wd9DsMmhflAdiiCxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAc6aKofhbQV/cOnjPbkKARRPRiwwHwYDVR0j
BBgwFoAU0A/rNV+ZCh0f4BdndanA8/Eecj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3FRU2JwUGtlYktGQTJLRnNiVGZOazVlRnhLRHE1VEZoNTdUWERUcFNI
NXgvMC9EMDBGRUIzNTVGOTkwQTFEMUZFMDE3Njc3NUE5QzBGM0YxMUU3MjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMEZFQjM1NUY5OTBBMUQx
RkUwMTc2Nzc1QTlDMEYzRjExRTcyM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdxUVNicFBrZWJLRkEyS0ZzYlRmTms1ZUZ4S0RxNVRGaDU3VFhEVHBTSDV4LzAv
MzIzODMwMzQzYTM1NjU2MTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAReqDANBgkqhkiG9w0BAQsFAAOCAQEAcRV+X8SX
zr0qxsxQvh5woCWvrRa+dVgrnQovmBLCYtBdMaPNGfoufj1evUjUn14Qpp452jv+
Om1imac8y4rgEg8v0GiEbaEgJN3UtvHQnHExTf0NZXUMysSCRSILhKZU8eh79k0I
iocBMybQqV2RdfLfR9sMnlSJOTjoA2Da7NbVCJjKuy/ZckW8lbEkM1u5BgCJo/nE
0Bd/zopLkqHPACSBE5pH/iIsizDSCDsKHlXjBuZvEMyaBhx2H0I+0T2y0dbTIfht
/stijDWc7igzqeO2djYAvfRAFJ55ViFbKna2ZqTFbGK+KqIOz657p3IoNqMpL+Yp
82MQkVIwTqhZcQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:19:59 2025 by rpki-client